一种信任域下的动态细粒度访问控制方法研究  

RESEARCH ON DYNAMIC AND FINE-GRAINED ACCESS CONTROL BASED ON TRUSTED DOMAIN

作　　者：万爱霞[1,3] 周家晶[2] 王福[1] 刘欣[1] 

机构地区：[1]公安部第三研究所信息网络安全公安部重点实验室,上海200031 [2]上海交通大学软件学院,上海200240 [3]上海电机学院,上海200240

出　　处：《计算机应用与软件》2011年第4期91-94,共4页Computer Applications and Software

基　　金：国家高技术研究发展计划项目(2008AA01Z412)

摘　　要：信任域下主客体数量庞大、种类丰富、环境复杂易变,对传统的访问控制提出了挑战。针对传统的访问控制策略不够灵活,无法实现细粒度权限的问题,提出了一种信任域内的动态细粒度访问控制方法。该方法基于RBAC模型增加了条件约束,实施时在策略执行点PEP增加了PEP细粒度组件,体现了访问过程中细粒性和动态性,满足了信任域内的动态细粒度访问控制要求。In trusted domain,the large number of subjects,many types of objects,complex and volatile environment all challenge traditional access control.Traditional access control policy is not flexible enough and is difficult to achieve fine-grained permissions.To address the problems above,a dynamic and fine-grained access control method is proposed.The method is based on RBAC model but increases the constraint condition.During its implementation the PEP fine-grained component is increased at policy execution point PEP.The method reflects the dynamic and fine-grained properties of the access process,meets the dynamic and fine-grained access control requirement in trusted domain.

关 键 词：信任域 访问控制 动态 细粒度 PEP细粒度组件 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]